In the MySQL Server configuration file, set the SSL parameters as follows:

ssl-ca=path/to/repo/mysql-test/std_data/cacert.pem 
ssl-cert=path/to/repo/mysql-test/std_data/server-cert.pem 
ssl-key=path/to/repo/mysql-test/std_data/server-key.pem 

Adjust the directories according to the location in which you installed the MySQL source code.

In this step you create a test user and set the user to require SSL.

Using the MySQL Command Line Client, connect as root and create the user sslclient.

To set privileges and requirements, issue the following command:

GRANT ALL PRIVILEGES ON *.* TO sslclient@'%' REQUIRE SSL;

The .NET client does not use the PEM file format, as .NET does not support this format natively. You will be using test client certificates from the same server repository, for the purposes of this example. You will need to convert these to PFX format first. This format is also known as PKCS#12. An article describing this procedure can be found at the Citrix website. From the directory server-repository-root/mysql-test/std_data, issue the following command:

openssl pkcs12 -export -in client-cert.pem -inkey client-key.pem -certfile cacert.pem -out client.pfx

When asked for an export password, enter the password “pass”. The file client.pfx will be generated. This file is used in the remainder of the tutorial.

You will use PFX file, client.pfx you created in the previous step to authenticate the client. The following example demonstrates how to connect using the SSL Mode, CertificateFile and CertificatePassword connection string options:

using (MySqlConnection connection = new MySqlConnection( 
  "database=test;user=sslclient;" +  
  "CertificateFile=H:\\bzr\\mysql-trunk\\mysqlest\\std_data\\client.pfx" +  
  "CertificatePassword=pass;" + 
  "SSL Mode=Required ")) 
{ 
    connection.Open(); 
}

The path to the certificate file will need to be changed to reflect your individual installation.

The first step is to import the PFX file, client.pfx, into the Personal Store. Double-click the file in Windows explorer. This launches the Certificate Import Wizard.

Follow the steps dictated by the wizard, and when prompted for the password for the PFX file, enter “pass”.

Click Finish to close the wizard and import the certificate into the personal store.

Start the Microsoft Management Console by entering mmc.exe at a command prompt.

Select File, Add/Remove snap-in. Click Add. Select Certificates from the list of available snap-ins in the dialog.

Click Add button in the dialog, and select the My user account radio button. This is used for personal certificates.

Click the Finish button.

Click OK to close the Add/Remove Snap-in dialog.

You will now have Certificates – Current User displayed in the left panel of the Microsoft Management Console. Expand the Certificates - Current User tree item and select Personal, Certificates. The right-hand panel will display a certificate issued to MySQL. This is the certificate that was previously imported. Double-click the certificate to display its details.

After you have imported the certificate to the Personal Store, you can use a more succint connection string to connect to the database, as illustrated by the following code:

using (MySqlConnection connection = new MySqlConnection( 
   "database=test;user=sslclient;" +  
   "Certificate Store Location=CurrentUser;" +  
   "SSL Mode=Required")) 
{ 
   connection.Open(); 
}